
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5n1OZEX3xJECg4e3Z510NE-S2U8.roa
File: 5n1OZEX3xJECg4e3Z510NE-S2U8.roa (raw, json)
Hash identifier: Sm+5rImSZN5EY8HGEUpuDGKsSg1PIuplaf5xxEkXKjY=
Subject key identifier: E6:7D:4E:64:45:F7:C4:91:02:83:87:B7:67:9D:74:34:4F:92:D9:4F
Certificate issuer: /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial: 01A8
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5n1OZEX3xJECg4e3Z510NE-S2U8.roa
Signing time: Tue 31 Mar 2026 07:53:50 +0000
ROA not before: Tue 31 Mar 2026 07:53:50 +0000
ROA not after: Mon 15 Mar 2027 01:30:02 +0000
asID: 4694
IP address blocks: 210.239.80.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 05 Apr 2026 23:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 424 (0x1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Validity
Not Before: Mar 31 07:53:50 2026 GMT
Not After : Mar 15 01:30:02 2027 GMT
Subject: CN=E67D4E6445F7C491028387B7679D74344F92D94F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:33:46:3a:1d:35:11:f5:5b:cc:ae:fa:a6:
f8:89:4a:fe:b5:46:bc:f8:46:83:b6:43:79:76:e0:
ab:36:6b:58:03:b1:7d:e4:d9:16:4e:75:d9:5c:2b:
75:ee:93:59:3b:c8:3b:0e:54:bb:a6:7b:11:7f:82:
00:90:3c:f1:2d:6a:9f:dd:80:be:1f:20:99:d6:a9:
d2:19:d6:76:ce:ff:28:b4:aa:55:ea:d9:93:b0:f5:
96:6c:18:74:df:a8:42:e3:c4:6f:08:25:cb:c5:f5:
52:09:32:27:f3:05:42:28:e4:e4:7d:a9:00:a4:26:
2e:c2:ad:b5:3f:2b:6a:ee:9b:77:62:88:05:6d:48:
06:ef:78:67:07:02:d3:71:4e:73:65:80:99:5c:7b:
62:14:53:d9:06:2d:43:bc:c2:9f:c4:4f:31:fd:93:
3b:4d:d1:f0:6e:ef:9f:d1:fa:56:2b:8b:9e:0a:20:
39:37:97:4e:d0:1a:cb:7b:8b:b0:5b:76:c7:43:3d:
0a:b7:48:b5:8a:00:ee:97:6c:06:70:ab:35:1d:42:
97:b6:27:61:56:f9:6e:1a:19:50:01:96:46:51:b5:
73:d5:69:9f:3c:fa:e7:5a:b0:04:59:e7:3e:52:92:
9f:3d:07:df:c7:74:e2:c8:94:8e:d9:a1:f7:be:8a:
a5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7D:4E:64:45:F7:C4:91:02:83:87:B7:67:9D:74:34:4F:92:D9:4F
X509v3 Authority Key Identifier:
keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/5n1OZEX3xJECg4e3Z510NE-S2U8.roa
sbgp-ipAddrBlock: critical
IPv4:
210.239.80.0/21
Signature Algorithm: sha256WithRSAEncryption
85:e3:6c:87:fe:0f:f0:f5:94:30:4e:41:fc:4a:de:4c:4a:f9:
13:09:94:4a:86:5a:09:22:f0:dd:66:ab:e7:15:61:1c:72:cf:
4b:69:d2:21:a8:81:45:8d:fc:ce:a1:71:01:1c:df:71:ce:a3:
1f:ba:43:44:fc:dc:68:77:34:50:bb:48:04:d4:e2:a9:0d:97:
d4:a5:8b:17:d6:ef:63:96:c1:7f:33:14:08:24:e4:87:4e:d7:
ed:3c:dd:cd:49:f5:04:6f:c0:4e:23:73:cb:18:98:9f:e4:12:
34:0a:04:b2:54:4f:b8:3c:65:42:b2:e0:0a:3b:10:9b:7f:a2:
a0:ea:45:3b:77:b2:e0:54:0a:29:2f:05:7e:ce:77:27:0f:36:
cc:f3:51:a3:a6:a1:fa:c4:76:9c:2f:b6:35:22:55:20:5c:cc:
59:85:79:5c:6b:92:e4:f3:c0:b2:69:60:c0:3f:ca:e4:cf:e9:
d7:2b:b1:69:3f:01:5b:2a:a1:f7:61:9a:f2:68:a5:67:53:f9:
e6:37:04:fa:6b:d4:57:60:75:fd:a1:ad:c7:29:b5:47:ce:88:
e5:0d:69:01:ae:36:01:45:8a:23:a7:82:77:d9:75:c1:8e:f0:
99:52:08:00:08:0a:44:83:93:fa:1b:00:a1:cf:56:91:1b:1c:
b9:90:c9:df
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgICAagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTkw
QTgyMjg4RDJFMjNEQkZBODc2MzhGM0VCOEI5OTVFMTg5N0U5NTAeFw0yNjAzMzEw
NzUzNTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU2N0Q0RTY0NDVGN0M0
OTEwMjgzODdCNzY3OUQ3NDM0NEY5MkQ5NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9FDNGOh01EfVbzK76pviJSv61Rrz4RoO2Q3l24Ks2a1gDsX3k
2RZOddlcK3Xuk1k7yDsOVLumexF/ggCQPPEtap/dgL4fIJnWqdIZ1nbO/yi0qlXq
2ZOw9ZZsGHTfqELjxG8IJcvF9VIJMifzBUIo5OR9qQCkJi7CrbU/K2rum3diiAVt
SAbveGcHAtNxTnNlgJlce2IUU9kGLUO8wp/ETzH9kztN0fBu75/R+lYri54KIDk3
l07QGst7i7BbdsdDPQq3SLWKAO6XbAZwqzUdQpe2J2FW+W4aGVABlkZRtXPVaZ88
+udasARZ5z5Skp89B9/HdOLIlI7Zofe+iqUPAgMBAAGjggHdMIIB2TAdBgNVHQ4E
FgQU5n1OZEX3xJECg4e3Z510NE+S2U8wHwYDVR0jBBgwFoAUWQqCKI0uI9v6h2OP
Pri5leGJfpUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMDgzL1dRcUNLSTB1STl2NmgyT1BQcmk1bGVHSmZwVS5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dRcUNLSTB1STl2NmgyT1BQcmk1
bGVHSmZwVS5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDA4My81bjFPWkVYM3hKRUNnNGUzWjUxME5FLVMyVTgucm9h
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0u9QMA0GCSqGSIb3DQEBCwUA
A4IBAQCF42yH/g/w9ZQwTkH8St5MSvkTCZRKhloJIvDdZqvnFWEccs9LadIhqIFF
jfzOoXEBHN9xzqMfukNE/NxodzRQu0gE1OKpDZfUpYsX1u9jlsF/MxQIJOSHTtft
PN3NSfUEb8BOI3PLGJif5BI0CgSyVE+4PGVCsuAKOxCbf6Kg6kU7d7LgVAopLwV+
zncnDzbM81GjpqH6xHacL7Y1IlUgXMxZhXlca5Lk88CyaWDAP8rkz+nXK7FpPwFb
KqH3YZryaKVnU/nmNwT6a9RXYHX9oa3HKbVHzojlDWkBrjYBRYojp4J32XXBjvCZ
UggACApEg5P6GwChz1aRGxy5kMnf
-----END CERTIFICATE-----
Generated at Wed Apr 1 15:56:27 2026 by rpki-client